Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
File: ZwbZhOcxaBICGI0pntNfAFsBdYA.cer (raw, json)
Hash identifier: 1aCVNdYcPx75aNu+3O+qztMrygTSu8yBgdUl/8W3xbY=
Subject key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026E80
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Oct 2025 14:43:42 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 17564
IP: 103.8.160.0/22
IP: 150.242.180.0/22
IP: 202.75.4.0/22
IP: 2401:b00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159360 (0x26e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 22 14:43:42 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A917DCDA, serialNumber=6706D984E731681202188D299ED35F005B017580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:aa:81:92:2b:15:9f:bf:d2:b8:fc:a3:a6:
6a:32:84:b6:1e:62:e9:f6:db:8e:d8:c9:bf:87:cf:
67:47:72:e4:5c:5f:94:aa:37:ae:58:60:ca:7a:84:
63:b6:cb:07:ea:48:a9:39:2c:e3:6e:94:d1:c1:69:
ff:fc:4a:55:f9:d7:81:ff:2e:57:87:49:a3:fc:c2:
fe:25:50:d2:1a:aa:dd:31:14:7a:91:b4:36:c2:17:
14:3a:44:65:70:03:cc:8d:93:05:8b:ec:16:7b:d0:
8d:03:59:af:43:98:15:39:3c:df:82:63:2e:16:76:
06:a2:f1:b3:79:b8:04:30:7a:51:8f:93:69:a3:68:
4b:42:c2:f5:6b:ba:ee:2b:db:1d:0f:a2:94:1d:e0:
14:0a:77:90:d1:09:b0:84:00:8c:cd:45:29:a9:26:
2c:6e:3a:2b:34:c4:2a:a8:b2:b1:4d:63:62:78:65:
3b:ff:b1:25:4b:fa:d0:34:91:97:82:76:eb:10:2b:
af:03:c8:7b:8f:a8:40:12:d9:1a:eb:5f:44:13:27:
92:f4:f0:8f:b5:15:62:78:d9:84:4b:74:23:8c:69:
eb:ad:5b:f8:9e:68:de:ff:7d:89:9b:c1:15:db:8e:
42:c6:2b:54:8f:8a:9a:52:6a:2b:81:a9:ee:33:e2:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17564
sbgp-ipAddrBlock: critical
IPv4:
103.8.160.0/22
150.242.180.0/22
202.75.4.0/22
IPv6:
2401:b00::/32
Signature Algorithm: sha256WithRSAEncryption
0c:83:e6:0c:69:fe:9e:ca:8f:ec:ac:22:86:d7:c1:55:c2:74:
b8:56:ae:e2:22:99:7c:d3:fc:85:f6:5b:64:52:fa:95:e1:d5:
bb:5c:81:92:57:21:32:2e:8d:93:c2:d0:bb:61:e0:34:2b:5f:
eb:d4:1f:17:27:f0:c3:85:48:a7:4e:84:c4:87:44:8d:22:07:
0b:ef:b7:fe:83:f1:23:f1:d9:db:05:2e:38:a7:9c:a2:8c:9b:
b9:7e:92:df:95:cd:4a:1e:d3:82:4e:97:34:73:f6:d0:50:b5:
1a:cc:d2:36:2e:fd:a3:94:0c:a3:c6:6b:5d:aa:7d:b5:2d:a2:
28:ad:e2:fe:df:92:58:71:b8:a1:4d:de:79:88:28:0f:42:ad:
b9:44:fb:c7:cd:46:70:6f:b5:c3:85:b1:37:ba:eb:eb:d6:c9:
67:cd:19:ab:0c:f6:0a:f2:d3:1b:7a:97:8e:32:38:c4:9b:17:
18:d3:40:eb:07:27:52:72:2a:40:12:2c:70:88:37:fa:a0:c6:
02:e6:db:82:a5:6b:47:49:71:a1:c7:9e:cc:30:d2:7b:c6:d0:
66:82:78:6f:fc:54:dc:cc:05:a1:4a:7b:45:64:59:90:59:52:
92:2e:3b:bb:42:ca:e9:bf:1a:22:92:0e:94:06:a0:bc:40:41:
13:3d:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:17:41 2025 by rpki-client